Denial of Service Vulnerability in Cisco IoT Field Network Director

CVE-2026-20167

What is CVE-2026-20167?

A security flaw in the web-based management interface of Cisco IoT Field Network Director allows an authenticated, low-privileged attacker to exploit improper error handling. By sending specially crafted input, the attacker can initiate a denial of service condition on a remotely managed router, potentially causing it to reload and making it unavailable for legitimate users. This risk highlights the importance of robust error handling and secure management practices in IoT environments.

References